use service to do logout
add SessionUserCleanListener to web.xml
generate random idBytes by extra string, now you can not use only random
user name to generate same idBytes
more improve to session page
image res
multi front ui improve